Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: 8JP9luRuFZ/LlBFtm/U929QABg8V2rhtxhU4wWDBP6s=
Subject key identifier: F6:E9:1C:FD:03:96:6B:21:61:CC:E6:FC:1D:BD:EE:C3:8A:F6:46:6E
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019D3909AB254F8F64A749E24B14939664E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: fe0qbJTrS2zZFv5KEhYpOj3PZAecBZv914+w3N1ejrQ=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ab:25:4f:8f:64:a7:49:e2:4b:14:93:96:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=f6e91cfd03966b2161cce6fc1dbdeec38af6466e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:8e:04:40:53:fb:9e:89:72:54:2e:58:86:
36:54:83:c7:fc:75:2a:36:99:e1:36:b1:0c:07:89:
53:35:44:96:25:90:12:30:4d:e6:b5:32:36:01:69:
3d:85:e6:fa:8a:fb:f2:18:81:0e:df:27:2a:fe:c2:
65:93:80:f2:de:f0:bb:ad:9e:56:f2:4d:16:82:88:
d1:a6:ac:06:81:4a:97:8b:9f:34:1e:b4:09:50:de:
6a:65:9d:c5:14:ed:5a:7f:ba:4e:83:92:97:f5:cc:
7d:a7:49:f6:b2:1a:48:8c:9d:a3:fa:57:d8:ab:c6:
24:43:ad:00:d9:56:04:b8:1e:76:42:3b:2d:12:81:
70:88:56:44:bc:72:68:08:42:da:f7:2d:df:b3:31:
f7:bb:d6:b8:2d:cf:f4:be:88:99:dd:58:8a:45:43:
21:f4:5c:18:1d:06:67:6f:49:50:8a:78:a6:2c:0a:
e4:08:16:0d:7f:38:40:ae:4e:0d:f9:5e:9f:50:3b:
43:c1:1d:c1:a6:f3:d3:56:28:70:d3:a5:86:98:99:
c9:18:92:09:cb:c1:6b:90:fb:f4:96:bc:bc:fe:e8:
22:58:a4:8d:20:15:cc:63:d2:a6:2c:8a:66:60:9e:
1c:ac:9e:60:37:2f:89:d1:13:c3:98:4b:19:86:d0:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E9:1C:FD:03:96:6B:21:61:CC:E6:FC:1D:BD:EE:C3:8A:F6:46:6E
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6d:be:81:c1:67:c8:4f:d0:6b:2c:73:f7:8b:3a:94:e5:44:
b0:13:ce:e3:4d:a7:64:90:b7:db:e2:24:ff:8f:af:84:38:6c:
02:a9:5a:4a:cc:06:5c:77:d9:e6:b1:92:a6:bb:6b:2a:8a:cf:
8f:62:03:ad:63:93:36:19:e6:7a:23:38:60:e7:eb:02:09:03:
e1:67:07:ef:90:40:94:e8:8e:f6:9f:63:9d:ee:92:d1:fa:b4:
8b:e1:0d:9f:0a:f0:aa:71:34:25:ba:03:74:0c:9c:0c:55:94:
fc:6c:78:33:7b:20:0a:cb:30:7c:7f:f5:f4:fc:b0:64:80:15:
76:df:ed:65:8a:65:c0:da:e7:17:39:06:58:87:6e:01:c6:85:
cd:5b:b1:d9:59:7e:7f:40:49:4c:15:1b:12:97:fe:26:6d:d1:
73:f3:93:74:43:58:f7:19:e6:17:31:2d:9a:6c:3c:79:cd:5c:
41:ed:1f:9b:3d:3c:71:a4:7d:22:95:f8:5d:06:04:74:72:8d:
a9:8b:10:2b:8a:77:82:82:6c:5a:04:bf:f7:1c:80:76:3a:d1:
17:cf:13:f3:6e:54:4a:61:6e:0d:a0:a1:3b:5c:37:8e:9d:3e:
85:79:1e:41:b4:68:0f:82:d0:ac:eb:21:21:9d:d2:4f:62:53:
8e:3d:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:30 2026 by rpki-client